What is the CVSS score of CVE-2025-52656?

CVE-2025-52656 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L. EPSS exploitation probability: 0.1%.

Which versions of Dryice Myxalytics are affected by CVE-2025-52656?

CVE-2025-52656 presents notable security risk rated CVSS 7.6. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-52656?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Dryice Myxalytics CVE-2025-52656

EUVD-2025-32455 HIGH

Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915)

2025-10-03 psirt@hcl.com

Information Disclosure Dryice Myxalytics

7.6

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

High

Availability

Low

Lifecycle Timeline

EUVD ID Assigned

Mar 13, 2026 - 19:29 euvd

EUVD-2025-32455

Analysis Generated

Mar 13, 2026 - 19:29 vuln.today

CVE Published

Oct 03, 2025 - 19:15 nvd

HIGH 7.6

DescriptionNVD

HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.

Analysis

Technical ContextAI

This vulnerability is classified as Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

CVE-2025-52656 vulnerability details – vuln.today

Back